This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer File: 18763247046D56AAFB3D6773D049459B01F9D976.cer (raw, json) Hash identifier: HY5Z/UtcVln+jeQrIvJ+6fVoiOuFQJlOZb35pFy+smw= Subject key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 67F6B0D7F070CDCA8EED7A6B250BB4C0747CD30C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:11:39 +0000 Certificate not after: Mon 18 Jan 2027 11:16:39 +0000 Subordinate resources: IP: 45.248.88.0/22 IP: 103.112.68.0/22 IP: 103.112.172.0/22 IP: 103.112.184.0/22 IP: 103.114.72.0/22 IP: 103.115.40.0 -- 103.115.51.255 IP: 103.115.56.0 -- 103.115.67.255 IP: 103.118.192.0/19 IP: 103.118.240.0 -- 103.119.3.255 IP: 103.119.12.0 -- 103.119.19.255 IP: 103.132.160.0/21 IP: 103.216.228.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 14:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f6:b0:d7:f0:70:cd:ca:8e:ed:7a:6b:25:0b:b4:c0:74:7c:d3:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:11:39 2026 GMT Not After : Jan 18 11:16:39 2027 GMT Subject: CN=18763247046D56AAFB3D6773D049459B01F9D976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:54:dd:b8:e6:82:93:40:99:49:ee:46:ed:3f: 0e:24:ec:e4:c2:b9:eb:d7:02:27:05:67:75:3d:1a: 83:e0:d0:bd:7d:7b:f7:89:c5:47:8b:a8:bc:6f:c1: 7c:fb:cf:25:07:c6:ea:a6:d0:ac:e2:c1:bb:58:f2: 80:3c:fb:04:70:e2:67:e2:18:cc:90:d4:37:f2:c3: 2b:83:77:66:34:85:ea:d8:da:47:a9:02:ec:35:ab: e5:9b:3c:39:16:ae:e9:be:b8:fb:aa:30:64:fd:a2: c4:8c:94:a3:fb:1e:c7:7e:44:81:0e:2d:d8:24:06: 45:a7:ab:1a:ab:4f:02:30:6e:bb:eb:35:d3:f9:fd: b6:6c:f4:d6:80:01:28:76:64:7c:39:1a:83:e6:4b: 2c:47:94:39:ec:6a:22:29:50:68:79:88:bf:22:8a: cd:6b:84:55:5b:90:8d:dd:0d:10:48:b1:db:de:0f: 94:1e:06:6c:bd:14:22:98:f6:61:e8:d9:90:bd:ce: dd:c1:9c:50:fc:e6:c6:37:42:ec:64:89:dd:3e:48: 72:dd:16:09:74:27:c8:f0:ba:ae:e1:53:e5:c1:25: 27:78:12:a2:19:98:6d:a6:c3:f0:fb:57:8d:15:0f: a5:17:44:28:20:a4:50:63:5f:96:93:86:70:4d:f8: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.88.0/22 103.112.68.0/22 103.112.172.0/22 103.112.184.0/22 103.114.72.0/22 103.115.40.0-103.115.51.255 103.115.56.0-103.115.67.255 103.118.192.0/19 103.118.240.0-103.119.3.255 103.119.12.0-103.119.19.255 103.132.160.0/21 103.216.228.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:b7:d9:9c:ae:65:08:d7:dd:6b:94:d7:f0:0d:05:61:9e:e3: 7c:fd:a5:65:fe:9c:cd:db:c2:5d:69:b5:f2:2d:a5:68:86:d9: 26:26:31:e5:99:97:e8:98:71:63:9e:fb:de:9a:ba:ec:f0:4c: 01:9b:66:b5:c8:8d:c3:fe:1a:d0:0a:7b:6f:9b:29:b1:bc:e2: 32:54:b9:b2:9e:26:a2:37:d2:16:34:0f:a1:9b:8c:b4:07:6d: 06:d3:aa:e9:0f:bf:64:c4:d3:e1:97:01:05:84:4d:64:a1:07: 49:d0:48:f9:92:97:82:92:c6:bd:22:18:5e:10:07:79:2f:41: 5a:24:ec:90:8d:5c:6b:5e:2c:76:e7:6f:f9:b9:2d:46:08:b1: 58:8a:68:ee:8b:87:5c:21:b9:88:e6:f8:14:ca:fe:a6:ef:ce: 6a:57:a1:89:ba:f3:ed:08:5f:43:c9:b8:01:ac:f6:72:f9:38: c8:d0:6c:d5:45:24:c5:a7:ba:f6:70:13:b5:d0:75:43:f1:1a: 57:1e:43:db:c3:14:f6:0a:bd:9f:a6:43:c9:d6:f3:0a:19:68: ce:3c:e8:dc:6a:ec:d6:bf:86:d0:07:21:eb:19:62:bb:45:f6: 78:e5:fd:ba:76:7f:ac:b2:d6:80:18:0e:f5:e2:3f:41:17:df: 7e:06:b6:8d -----BEGIN CERTIFICATE----- MIIGCjCCBPKgAwIBAgIUZ/aw1/BwzcqO7XprJQu0wHR80wwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMTEzOVoX DTI3MDExODExMTYzOVowMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2 NzczRDA0OTQ1OUIwMUY5RDk3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANxU3bjmgpNAmUnuRu0/DiTs5MK569cCJwVndT0ag+DQvX1794nFR4uovG/B fPvPJQfG6qbQrOLBu1jygDz7BHDiZ+IYzJDUN/LDK4N3ZjSF6tjaR6kC7DWr5Zs8 ORau6b64+6owZP2ixIyUo/sex35EgQ4t2CQGRaerGqtPAjBuu+s10/n9tmz01oAB KHZkfDkag+ZLLEeUOexqIilQaHmIvyKKzWuEVVuQjd0NEEix294PlB4GbL0UIpj2 YejZkL3O3cGcUPzmxjdC7GSJ3T5Ict0WCXQnyPC6ruFT5cElJ3gSohmYbabD8PtX jRUPpRdEKCCkUGNflpOGcE34ZB8CAwEAAaOCAv0wggL5MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBh2MkcEbVaq+z1nc9BJRZsB+dl2MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODk5MzU0ODYxNTY4Mi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1Njgy LzAvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgYEGCCsGAQUF BwEHAQH/BHIwcDBuBAIAATBoAwQCLfhYAwQCZ3BEAwQCZ3CsAwQCZ3C4AwQCZ3JI MAwDBANncygDBAJnczAwDAMEA2dzOAMEAmdzQAMEBWd2wDAMAwQEZ3bwAwQCZ3cA MAwDBAJndwwDBAJndxADBANnhKADBAJn2OQwDQYJKoZIhvcNAQELBQADggEBAAu3 2ZyuZQjX3WuU1/ANBWGe43z9pWX+nM3bwl1ptfItpWiG2SYmMeWZl+iYcWOe+96a uuzwTAGbZrXIjcP+GtAKe2+bKbG84jJUubKeJqI30hY0D6GbjLQHbQbTqukPv2TE 0+GXAQWETWShB0nQSPmSl4KSxr0iGF4QB3kvQVok7JCNXGteLHbnb/m5LUYIsViK aO6Lh1whuYjm+BTK/qbvzmpXoYm68+0IX0PJuAGs9nL5OMjQbNVFJMWnuvZwE7XQ dUPxGlceQ9vDFPYKvZ+mQ8nW8woZaM486Nxq7Na/htAHIesZYrtF9njl/bp2f6yy 1oAYDvXiP0EX334Gto0= -----END CERTIFICATE-----Generated at Tue Jan 20 07:35:02 2026 by rpki-client